How to Password-Protect a SharePoint File
Adding a password to a sharing link is the simplest way to ensure that even if the link gets forwarded, the file stays protected.
What it is
Password-protected sharing links require recipients to enter a password before accessing the file. Even if the link is forwarded, copied, or shared accidentally, the file remains locked unless the password is also shared — which it shouldn’t be over the same channel.
It’s not a replacement for proper permissions, but it adds a useful layer when sharing externally with people who don’t have a corporate identity to authenticate against. Combined with expiry and view-only, it gives you a robust set of controls for time-bound external access.
The trick is communicating the password securely. Send the link in email, send the password through Teams, SMS, or a phone call. Never put both in the same message — that defeats the purpose entirely.
When to use this
- Sharing externally with people who don’t have a Microsoft account.
- Distributing time-bound, sensitive content to a defined audience.
- When the recipient is unknown to your organisation but the content needs protection.
- When you want to ensure the link can’t be casually forwarded.
How to do it
- Select the file and click Share.
- Open Link settings.
- Find the Set password option (if available in your tenant).
- Enter a strong password.
- Save the password securely — you’ll need to share it separately.
- Send the link to the recipient.
- Send the password via a different channel (text, phone call, Teams).
Best practices
- Never send the password in the same channel as the link. Email link, text password. Or vice versa.
- Use strong passwords, not ‘Welcome1’. If it’s worth protecting, it’s worth protecting properly.
- Don’t reuse passwords across files. One compromised password should affect one file, not your entire portfolio.
- Combine with expiry. Password + expiry + view-only is a strong baseline for external sharing.
Common mistakes
- Sending the password in the same email as the link. Defeats the entire point.
- Using weak or shared passwords. Treat each share as a unique key.
- Relying on passwords as your only control. Layer with permissions, expiry, and download blocking.
The Sharing Handbook gives you the Traffic Light System for every SharePoint sharing decision. Real screenshots of the Link Settings dialog, end-user focused, no admin access required.
Get the Sharing Handbook — $27 →FAQ
How do I password-protect a SharePoint sharing link?
When sharing, click Link settings. Tick Set password and enter a password. Send the link to the recipient, then share the password separately (text message, phone call) — never in the same email. The recipient enters the password to access the file.
When should I password-protect a SharePoint file?
Almost never for internal sharing — your colleagues already authenticate via Microsoft 365. Mostly for external sharing of sensitive content where you can’t use ‘Specific people’ (e.g. sharing to a generic team inbox). Even then, ‘Specific people’ with expiry is usually a better choice than a password on ‘Anyone with the link’.
Are SharePoint link passwords secure?
Reasonably — they add a meaningful layer of protection against link leakage. But they’re not encryption — the file itself isn’t password-protected, only the link. Anyone who downloads the file has an unprotected copy. For genuinely confidential content, use sensitivity labels with encryption instead of (or in addition to) link passwords.
Can I change or remove the password on a SharePoint sharing link?
Yes — open Manage access, find the link, and edit the password (or remove it entirely). The change takes effect immediately. If you suspect the password has leaked, change it and notify intended recipients via a separate channel.